Blackberry 9720 Smartphone 7 1 User Guide

							S/MIME and PGP protected messages
S/MIME and PGP protected message basics
About signing and encrypting messages
If your email account uses a BlackBerry Enterprise Server that supports this feature, you can digitally sign or encrypt 
messages to add another level of security to email and PIN messages that you send from your 
BlackBerry smartphone. 
Digital signatures are designed to help recipients verify the authenticity and integrity of messages that you send. When you  digitally sign a message using your private key, recipients use your public key to verify that the message is from you and 
that the message hasn't been changed.
Encryption is designed to keep messages confidential. When you encrypt a message, your smartphone uses the recipient’s 
public key to encrypt the message. Recipients use their private key to decrypt the message.
To send an encrypted PIN message, you must have a PIN and an email address for the contact in your contact list. Your 
smartphone uses the email address in your contact list to locate a 
PGP key or certificate for the contact.
Sign or encrypt a message
You can sign or encrypt email and PIN messages.
If you use a PGP Universal Server, your administrator might have set options so that the PGP Universal Server always signs 
or encrypts your messages.
1.When you are composing a message, change the Encoding field.
2.If necessary, change the Classification field.
3.To change the certificate that you use to send the message, press the  key > Options. 
•To change the signing or encryption certificate, change a Certificate field.
•To encrypt the message using only the recipient’s certificate, in the Encryption Options section, change the 
Certificate field to None.
•To send the message without including your certificate, change the Include Certificate field to No.
If you change the Certificate field to None, you cannot read the message after you send it.
If you encrypt a message and keys are not available for all recipients, you might be able to click Send to Server to send the 
message to the 
PGP Universal Server. If the PGP Universal Server locates the keys, it encrypts the message. Otherwise, it 
might send the message as plain text.
Related information
Some signing and encryption options aren't available on my smartphone,128
Encrypt an S/MIME or a PGP protected message with a passphrase
By default, your BlackBerry smartphone uses your certificate or PGP key to encrypt messages.
1.When composing a message, change the Encoding field to an option that uses encryption.
User GuideMessages
121 
						

							2.Press the  key > Options. 
3.In the Encryption section, select the Use Password-Based Encryption checkbox or Use Conventional Encryption 
checkbox.
4.Press the  key > Save. 
Using a secure method, let the recipient know what the passphrase is.
Attach a certificate or PGP key to a message
You can attach a certificate or PGP key to email and PIN messages.
1.When composing a message, press the  key > Attach > Certificates or PGP Keys. 
2.Highlight a certificate or PGP key.
3.Press the  key > Continue. 
Download the certificate or PGP key used to sign or encrypt a message
If a certificate or PGP key isn't included in a received message or isn't already stored in the key store on your BlackBerry 
smartphone, you can download the certificate or PGP key.
If you are enrolled with the PGP Universal Server, your smartphone might download the sender’s PGP key from the PGP 
Universal Server
 automatically. You can't download the sender’s PGP key manually.
1.In a message, highlight the encryption indicator or a digital signature indicator.
2.Press the  key > Fetch Sender's Certificate or Fetch Sender's PGP Key. 
3.Specify the search criteria.
4.Press the  key > Search.
5.Click a certificate or PGP key.
6.Click Add To Key Store.
Add a certificate or PGP key from a message
If you are enrolled with the PGP Universal Server, you can't add PGP keys from messages.
1.In a message, highlight a digital signature indicator.
2.Press the  key.
•To import the certificate or PGP key, click Import Certificate or Import PGP Key.
•To import and trust the certificate or PGP key, click Trust Certificate or Trust PGP Key.
Add a certificate or PGP key from an attachment
If you are enrolled with the PGP Universal Server, you can't add PGP keys from attachments.
1.In a message, click the certificate or PGP key attachment at the end of the message.
2.Click Retrieve Certificate or Retrieve PGP Key.
User GuideMessages
122 
						

							3.Click the certificate or PGP key.
•To import the certificate or PGPkey, click Import Certificate or Import PGP Key.
•To import and trust the certificate or PGP key, click Trust Certificate or Trust PGP Key
Related information
I can't open an attachment in an encrypted message,128
Attachment indicators in S/MIME and PGP protected messages
IndicatorDescriptionThe message includes a certificate attachment.The message includes multiple certificate attachments.The message includes a PGP key attachment.The message includes multiple PGP key attachments.The message includes a certificate server attachment.
Add connection information for a certificate server from a message
If you are enrolled with the PGP Universal Server, you can't add connection information for a certificate server from a 
message.
1.In a message, highlight the  indicator at the end of the message. 2.Press the  key > Import Server. 
View the certificate used to sign or encrypt a message
1.In a message, highlight the encryption status indicator or a digital signature indicator.
2.Press the  key > View Sender's Certificate or View Encryption Certificate. 
View the PGP key used to sign or encrypt a message
1.In a message, highlight the encryption status indicator or a digital signature indicator.
2.Press the  key > View Sender's PGP Key or View Encryption PGP Key. 
View encryption information for a weakly encrypted message
1.In a weakly encrypted message, highlight the encryption status indicator.
User GuideMessages
123 
						

							2.Press the  key > Encryption Details. 
S/MIME and PGP protected message status
Digital signature indicators for S/MIME or PGP protected messages
IndicatorDescriptionYour BlackBerry smartphone verified the digital signature.The BlackBerry Enterprise Server that is associated with your smartphone verified the digital 
signature.Your smartphone requires more data to verify the digital signature.Your smartphone can't verify the digital signature.Your smartphone trusts the sender’s certificate or PGP key.Your smartphone trusts the sender’s certificate chain.The sender’s email address doesn't match the email address of the certificate subject or the 
PGP key, or the sender’s certificate or key is revoked, isn't trusted, can't be verified, or isn't on 
your smartphone.
The certificate or PGP key is weak, the certificate or key status isn't current, or your 
smartphone requires more data to verify the trust status of the certificate or key.The sender’s certificate, certificate chain, or PGP key is expired.
Encryption status indicators
Your administrator sets whether messages that you receive are considered to be strong or weak.
IndicatorDescriptionThe message is strongly encrypted.The message is weakly encrypted.
Check the status of a certificate or certificate chain
If a certificate is included in a received message, or is already stored in the key store on your BlackBerry device, you can 
check the status of the sender's certificate, or you can check the status of the sender's certificate and all other certificates\
  in the certificate chain.
User GuideMessages
124 
						

							1.In a message, highlight a digital signature indicator.2.Press the  key. 
3.Click Check Sender’s Certificate or Check Sender’s Cert Chain.
S/MIME and PGP protected message options
Change your signing and encryption certificate or key
Your BlackBerry smartphone uses your certificate or PGP key to encrypt messages in the Sent Items folder and includes 
your encryption certificate or 
PGP public key in messages that you send so that recipients can encrypt their reply 
messages.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > S/MIME or PGP.
3.Change the Certificate fields or the Default Key field.
4.Press the  key > Save. 
Related information
Some signing and encryption options aren't available on my smartphone,128
Change options for downloading attachments in encrypted messages
1.On the home screen or in a folder, click the Options icon.
2.Click Security > S/MIME or PGP.
3.Do one of the following:
•To download attachments in encrypted messages automatically, change the Encrypted Attachment Support 
field to Automatic.
•To download attachments in encrypted messages manually, change the Encrypted Attachment Support field to 
Manual.
•To prevent your BlackBerry smartphone from downloading attachments in encrypted messages, change the 
Encrypted Attachment Support field to None.
4.Press the  key > Save.
Change the default signing and encryption option
Your BlackBerry smartphone is designed to use the default signing and encryption option when you send a message to a 
contact that you haven't previously sent a message to or received a message from. Otherwise, your smartphone uses the 
message history to suggest a signing and encryption option.
You can set your smartphone to try to use the default signing and encryption option for your outgoing messages instead. 
However, if message classifications are turned on, the default signing and encryption option might not be able to be used 
depending on the security requirements of a message's classification. For example, if your default signing and encryption 
option is set to Sign and you compose a reply to a message that is classified as confidential, the signing and encryption 
option is set to Sign and Encrypt instead of the default signing and encryption option.
User GuideMessages
125 
						

							1.On the home screen or in a folder, click the Options icon.
2.Click Device > Advanced System Settings > Default Services.
3.Change the Default Encoding field.
•To try to use the default signing and encryption option for outgoing messages, set the Outgoing Message 
Encoding Suggestion
 field to Use Default Encoding.
•To use the signing and encryption option based on the message history, set the Outgoing Message Encoding 
Suggestion
 field to Use Message History.
4.Press the  key > Save. 
Related information
Some signing and encryption options aren't available on my smartphone,128
About message classifications
If your BlackBerry smartphone is associated with an email account that uses a BlackBerry Enterprise Server that supports 
this feature and your administrator turns on message classifications, the 
BlackBerry Enterprise Server applies a minimum 
set of security actions to each message that you compose, forward, or reply to, based on the classification that you assign  to the message. Your administrator specifies the message classifications that you can use.
If you receive a message that uses message classifications, you can view the abbreviation for the classification in the 
subject line of the message and the full description for the classification in the body of the message. You can also view the 
abbreviation and full description for the classification for a sent message in the Sent Items folder.
Change the default message classification
Before you begin: To perform this task, your work email account must use a BlackBerry Enterprise Server that supports 
this feature and your administrator must turn on message classifications.
Your BlackBerry smartphone is designed to use the default message classification when you send a message to a contact 
that you haven't sent a message to or received a message from previously. If you have sent a message to or received a 
message from the contact previously, your smartphone tries to use the message classification that was used for the last 
message.
1.On the home screen or in a folder, click the Options icon.
2.Click Device > Advanced System Settings > Default Services.
3.Change the Default Classification field.
4.Press the  key > Save. 
Change the size of S/MIME or PGP indicators in messages
1.On the home screen or in a folder, click the Options icon.
2.Click Security > S/MIME or PGP.
3.In the General section, change the Message Viewer Icons field.
4.Press the  key > Save. User GuideMessages
126 
						

							Change the encryption algorithms for S/MIME or PGP protected messages
If a message has multiple recipients, your BlackBerry smartphone uses the first encryption algorithm that's selected in the 
list and that all recipients are known to support.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > S/MIME or PGP.
3.In the Allowed Content Ciphers section, select the checkbox beside one or more allowed content ciphers.
4.Press the  key > Save. 
Change when the prompt to enter your key store password in a signed or 
encrypted message appears
You might be prompted to enter your key store password each time a personal certificate or PGP key in your key store is 
used, such as when you send a signed message or your 
BlackBerry smartphone decrypts a received message. You can 
turn off this prompt or set the prompt to appear less often.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Highlight a personal certificate or PGP key.
4.Press the  key > Change Security Level.
•To turn off the prompt to enter your key store password, set the security level to Low.
•To display the prompt only when the password isn't cached or the refresh rate for key store items is expired, set  the security level to 
Medium.
•To always display the prompt, set the security level to High.
5.Click OK.
Turn off the prompt that appears before an S/MIME or a PGP protected 
message is cut short
1.On the home screen or in a folder, click the Options icon.
2.Click Security > S/MIME or PGP.
3.In the General section, change the Truncation Mode field to Send Anyway or More All And Send.
4.Press the  key > Save. 
To turn on the prompt again, change the Truncation Mode field to Prompt User.
Turn off the prompt that appears when you use a certificate or PGP key 
that is not recommended for use
1.On the home screen or in a folder, click the Options icon.
User GuideMessages
127 
						

							2.Click Security > S/MIME or PGP.
3.In the General section, clear the Warn About Problems With My Certificates checkbox or Warn About Problems 
With My PGP Keys
 checkbox.
4.Press the  key > Save. 
Request delivery notification for signed S/MIME-protected messages
1.On the home screen or in a folder, click the Options icon.
2.Click Security > S/MIME.
3.Select the Request S/MIME Receipts check box.
4.Press the  key > Save. 
Troubleshooting: S/MIME and PGP protected messages
Some signing and encryption options aren't available on my smartphone
Try the following actions:
•Verify that the email account that you're using supports all signing and encryption options.
•If you use message classifications, verify that the message classification supports the signing or encryption options that 
you want. Try using a different message classification.
I can't open an attachment in an encrypted message
You might not be able to open an attachment in an encrypted message for the following reasons:
•Your administrator might have set options to prevent you from opening attachments in encrypted messages.
•The message might have been encrypted with an algorithm that isn't supported. To view which algorithms your 
BlackBerry smartphone supports, click the Options icon. Click Security > S/MIME or PGP. In the Encryption section, 
view which content ciphers are selected.
•Attachments in the .pgp file format aren't supported.
•If you are using the PGP Support Package for BlackBerry smartphones, you can't open an attachment in a PGP 
protected message that was encrypted using the OpenPGP format by an IBM Notes client working with PGP Desktop 
Professional
 or that was encrypted by the PGP Universal Server.
IBM Notes native encrypted messages
About IBM Notes native encrypted messages
If your email account uses a BlackBerry Enterprise Server that supports this feature, you can send and receive messages 
on your 
BlackBerry smartphone using IBM Notes native encryption. When you send or receive IBM Notes native encrypted 
messages, you might be prompted to type your 
IBM Notes ID password.
User GuideMessages
128 
						

							Before you can send or receive IBM Notes native encrypted messages, you or your administrator might need to import your 
IBM Notes ID file using iNotes (previously known as IBM Domino Web Access). Your computer must be running IBM Notes 
7.0 or later with an email account on an IBM Domino server 7.0 or later.
Encrypt a message using IBM Notes native encryption
1.When composing, forwarding or replying to a message, change the Encoding field to Lotus Notes Encryption.
2.If you are prompted, type your IBM Notes ID password.
Tips: Messages application
Shortcuts: Messages
Depending on the typing input language that you are using, some shortcuts might not be available.
In a message
Reply to a messagePress RReply to all in an email or a PIN messagePress LForward a messagePress FFile an email messagePress IView or hide the email address of a contactHighlight the contact in the To or From field. Press Q.Move to the next messagePress NMove to the previous messagePress P
In your message inbox
Open a messagePress the  key.Compose a message from a message inboxPress CMark a message as read or unreadPress the  key and U.Add a flag to a messagePress WUser GuideMessages
129 
						

							View all flagged messagesPress the  key and F.View received messages and received call logsPress the  key and I.View draft and sent messagesPress the  key and O.View voice mail messagesPress the  key and V.View text messagesPress the  key and S.View call logsPress the  key and P.View all your messagesPress the  key.
Move around your message inbox
Move up a screenPress the  key and the  key.Move down a screenPress the  key.Move to the top of a message inboxPress TMove to the bottom of a message inboxPress BMove to the next unread itemPress UMove to the next related messagePress JMove to the previous related messagePress K
Shortcuts: Files and attachments
Depending on the typing input language that you are using, some shortcuts might not be available.
Search for text in a file or an attachmentPress FMove to the last cursor position after closing and reopening a file or an attachmentPress GUser GuideMessages
130